Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 08:59:03.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50529 1 109 1 2025-09-13 08:59:03.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54904 1 80 1 2025-09-13 08:59:03.368 00:00:00.000 UDP 28.104.0.1:50529 -> 198.28.0.2:53 1 64 1 2025-09-13 08:59:03.367 00:00:00.000 UDP 28.104.0.1:54904 -> 198.28.0.2:53 1 64 1 2025-09-13 08:55:27.450 00:05:04.600 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 08:55:31.733 00:05:00.282 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:00:03.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57379 1 80 1 2025-09-13 09:00:03.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42136 1 109 1 2025-09-13 09:00:03.709 00:00:00.000 UDP 28.104.0.1:42136 -> 198.28.0.2:53 1 64 1 2025-09-13 09:00:03.709 00:00:00.000 UDP 28.104.0.1:57379 -> 198.28.0.2:53 1 64 1 2025-09-13 08:56:27.401 00:05:04.347 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 08:59:31.735 00:01:00.261 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-13 09:01:04.001 00:00:00.000 UDP 28.104.0.1:51362 -> 198.28.0.2:53 1 64 1 2025-09-13 09:01:04.001 00:00:00.000 UDP 28.104.0.1:42959 -> 198.28.0.2:53 1 64 1 2025-09-13 09:01:04.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42959 1 80 1 2025-09-13 09:01:04.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51362 1 109 1 2025-09-13 09:01:31.736 00:00:00.260 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-09-13 08:57:27.410 00:05:04.325 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:02:04.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34202 1 80 1 2025-09-13 09:02:04.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40926 1 109 1 2025-09-13 09:02:04.304 00:00:00.000 UDP 28.104.0.1:40926 -> 198.28.0.2:53 1 64 1 2025-09-13 09:02:04.304 00:00:00.000 UDP 28.104.0.1:34202 -> 198.28.0.2:53 1 64 1 2025-09-13 09:02:31.736 00:00:00.261 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-09-13 09:02:28.722 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 08:58:41.806 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2732 1 2025-09-13 09:03:04.611 00:00:00.000 UDP 28.104.0.1:50323 -> 198.28.0.2:53 1 64 1 2025-09-13 09:03:04.611 00:00:00.000 UDP 28.104.0.1:59115 -> 198.28.0.2:53 1 64 1 2025-09-13 09:03:04.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50323 1 80 1 2025-09-13 09:03:04.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59115 1 109 1 2025-09-13 09:03:31.753 00:00:00.245 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-09-13 09:04:04.915 00:00:00.000 UDP 28.104.0.1:55897 -> 198.28.0.2:53 1 64 1 2025-09-13 09:04:04.914 00:00:00.000 UDP 28.104.0.1:42704 -> 198.28.0.2:53 1 64 1 2025-09-13 09:04:04.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42704 1 109 1 2025-09-13 09:04:04.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55897 1 80 1 2025-09-13 09:00:27.402 00:05:04.677 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:05:05.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55292 1 109 1 2025-09-13 09:05:05.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48656 1 80 1 2025-09-13 09:05:05.242 00:00:00.000 UDP 28.104.0.1:48656 -> 198.28.0.2:53 1 64 1 2025-09-13 09:05:05.242 00:00:00.000 UDP 28.104.0.1:55292 -> 198.28.0.2:53 1 64 1 2025-09-13 09:01:27.451 00:05:04.610 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:01:31.736 00:05:00.291 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:06:05.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57890 1 80 1 2025-09-13 09:06:05.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33539 1 109 1 2025-09-13 09:06:05.543 00:00:00.000 UDP 28.104.0.1:33539 -> 198.28.0.2:53 1 64 1 2025-09-13 09:06:05.543 00:00:00.000 UDP 28.104.0.1:57890 -> 198.28.0.2:53 1 64 1 2025-09-13 09:02:27.401 00:05:04.358 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:07:05.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58986 1 109 1 2025-09-13 09:07:05.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46634 1 80 1 2025-09-13 09:07:05.845 00:00:00.000 UDP 28.104.0.1:46634 -> 198.28.0.2:53 1 64 1 2025-09-13 09:07:05.845 00:00:00.000 UDP 28.104.0.1:58986 -> 198.28.0.2:53 1 64 1 2025-09-13 09:07:28.778 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:03:27.412 00:05:04.338 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:08:06.168 00:00:00.000 UDP 28.104.0.1:59847 -> 198.28.0.2:53 1 64 1 2025-09-13 09:08:06.168 00:00:00.000 UDP 28.104.0.1:53919 -> 198.28.0.2:53 1 64 1 2025-09-13 09:08:06.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53919 1 109 1 2025-09-13 09:08:06.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59847 1 80 1 2025-09-13 09:04:01.814 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-09-13 09:04:31.749 00:05:00.259 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:09:06.464 00:00:00.000 UDP 28.104.0.1:56766 -> 198.28.0.2:53 1 64 1 2025-09-13 09:09:06.464 00:00:00.000 UDP 28.104.0.1:41622 -> 198.28.0.2:53 1 64 1 2025-09-13 09:09:06.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41622 1 80 1 2025-09-13 09:09:06.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56766 1 109 1 2025-09-13 09:10:06.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39761 1 80 1 2025-09-13 09:10:06.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50711 1 109 1 2025-09-13 09:10:06.764 00:00:00.000 UDP 28.104.0.1:50711 -> 198.28.0.2:53 1 64 1 2025-09-13 09:10:06.764 00:00:00.000 UDP 28.104.0.1:39761 -> 198.28.0.2:53 1 64 1 2025-09-13 09:06:27.402 00:05:04.674 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:11:07.087 00:00:00.000 UDP 28.104.0.1:46953 -> 198.28.0.2:53 1 64 1 2025-09-13 09:11:07.087 00:00:00.000 UDP 28.104.0.1:47626 -> 198.28.0.2:53 1 64 1 2025-09-13 09:11:07.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47626 1 80 1 2025-09-13 09:11:07.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46953 1 109 1 2025-09-13 09:07:27.452 00:05:04.614 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:07:31.749 00:05:00.285 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:12:07.376 00:00:00.000 UDP 28.104.0.1:45091 -> 198.28.0.2:53 1 64 1 2025-09-13 09:12:07.377 00:00:00.000 UDP 28.104.0.1:36537 -> 198.28.0.2:53 1 64 1 2025-09-13 09:12:07.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45091 1 80 1 2025-09-13 09:12:07.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36537 1 109 1 2025-09-13 09:12:28.962 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:08:27.404 00:05:04.357 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:13:07.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40739 1 109 1 2025-09-13 09:13:07.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37280 1 80 1 2025-09-13 09:13:07.732 00:00:00.000 UDP 28.104.0.1:40739 -> 198.28.0.2:53 1 64 1 2025-09-13 09:13:07.732 00:00:00.000 UDP 28.104.0.1:37280 -> 198.28.0.2:53 1 64 1 2025-09-13 09:09:21.828 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3156 1 2025-09-13 09:09:27.413 00:05:04.337 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:14:07.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57046 1 109 1 2025-09-13 09:14:07.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57969 1 80 1 2025-09-13 09:14:07.982 00:00:00.000 UDP 28.104.0.1:57046 -> 198.28.0.2:53 1 64 1 2025-09-13 09:14:07.982 00:00:00.000 UDP 28.104.0.1:57969 -> 198.28.0.2:53 1 64 1 2025-09-13 09:10:31.750 00:05:00.259 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:15:08.292 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42825 1 80 1 2025-09-13 09:15:08.292 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54156 1 109 1 2025-09-13 09:15:08.282 00:00:00.000 UDP 28.104.0.1:42825 -> 198.28.0.2:53 1 64 1 2025-09-13 09:15:08.282 00:00:00.000 UDP 28.104.0.1:54156 -> 198.28.0.2:53 1 64 1 2025-09-13 09:16:08.571 00:00:00.000 UDP 28.104.0.1:55786 -> 198.28.0.2:53 1 64 1 2025-09-13 09:16:08.571 00:00:00.000 UDP 28.104.0.1:53674 -> 198.28.0.2:53 1 64 1 2025-09-13 09:16:08.582 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55786 1 109 1 2025-09-13 09:16:08.582 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53674 1 80 1 2025-09-13 09:12:27.403 00:05:04.686 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:17:08.859 00:00:00.000 UDP 28.104.0.1:39840 -> 198.28.0.2:53 1 64 1 2025-09-13 09:17:08.859 00:00:00.000 UDP 28.104.0.1:37164 -> 198.28.0.2:53 1 64 1 2025-09-13 09:17:08.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39840 1 109 1 2025-09-13 09:17:08.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37164 1 80 1 2025-09-13 09:17:29.321 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:13:27.453 00:05:04.626 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:13:31.750 00:05:00.324 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:18:09.165 00:00:00.000 UDP 28.104.0.1:52943 -> 198.28.0.2:53 1 64 1 2025-09-13 09:18:09.165 00:00:00.000 UDP 28.104.0.1:41216 -> 198.28.0.2:53 1 64 1 2025-09-13 09:18:09.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41216 1 80 1 2025-09-13 09:18:09.175 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52943 1 109 1 2025-09-13 09:14:27.403 00:05:04.370 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:14:41.838 00:05:10.022 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3036 1 2025-09-13 09:19:09.455 00:00:00.000 UDP 28.104.0.1:58020 -> 198.28.0.2:53 1 64 1 2025-09-13 09:19:09.455 00:00:00.000 UDP 28.104.0.1:58473 -> 198.28.0.2:53 1 64 1 2025-09-13 09:19:09.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58473 1 109 1 2025-09-13 09:19:09.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58020 1 80 1 2025-09-13 09:15:27.414 00:05:04.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:20:09.751 00:00:00.000 UDP 28.104.0.1:54952 -> 198.28.0.2:53 1 64 1 2025-09-13 09:20:09.751 00:00:00.000 UDP 28.104.0.1:51659 -> 198.28.0.2:53 1 64 1 2025-09-13 09:20:09.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51659 1 80 1 2025-09-13 09:20:09.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54952 1 109 1 2025-09-13 09:16:31.751 00:05:00.259 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:21:10.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52874 1 80 1 2025-09-13 09:21:10.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40102 1 109 1 2025-09-13 09:21:10.053 00:00:00.000 UDP 28.104.0.1:40102 -> 198.28.0.2:53 1 64 1 2025-09-13 09:21:10.053 00:00:00.000 UDP 28.104.0.1:52874 -> 198.28.0.2:53 1 64 1 2025-09-13 09:22:10.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54245 1 109 1 2025-09-13 09:22:10.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42117 1 80 1 2025-09-13 09:22:10.346 00:00:00.000 UDP 28.104.0.1:42117 -> 198.28.0.2:53 1 64 1 2025-09-13 09:22:10.346 00:00:00.000 UDP 28.104.0.1:54245 -> 198.28.0.2:53 1 64 1 2025-09-13 09:22:29.145 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:18:27.404 00:05:04.687 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:23:10.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55247 1 80 1 2025-09-13 09:23:10.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38884 1 109 1 2025-09-13 09:23:10.635 00:00:00.000 UDP 28.104.0.1:38884 -> 198.28.0.2:53 1 64 1 2025-09-13 09:23:10.635 00:00:00.000 UDP 28.104.0.1:55247 -> 198.28.0.2:53 1 64 1 2025-09-13 09:19:27.454 00:05:04.627 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:19:31.763 00:05:00.314 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:24:10.931 00:00:00.000 UDP 28.104.0.1:37550 -> 198.28.0.2:53 1 64 1 2025-09-13 09:24:10.930 00:00:00.000 UDP 28.104.0.1:41172 -> 198.28.0.2:53 1 64 1 2025-09-13 09:24:10.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37550 1 109 1 2025-09-13 09:24:10.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41172 1 80 1 2025-09-13 09:20:01.861 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-09-13 09:20:27.405 00:05:04.370 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:25:11.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56530 1 109 1 2025-09-13 09:25:11.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39931 1 80 1 2025-09-13 09:25:11.245 00:00:00.000 UDP 28.104.0.1:56530 -> 198.28.0.2:53 1 64 1 2025-09-13 09:25:11.245 00:00:00.000 UDP 28.104.0.1:39931 -> 198.28.0.2:53 1 64 1 2025-09-13 09:21:27.415 00:05:04.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:26:11.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44045 1 109 1 2025-09-13 09:26:11.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49038 1 80 1 2025-09-13 09:26:11.534 00:00:00.000 UDP 28.104.0.1:44045 -> 198.28.0.2:53 1 64 1 2025-09-13 09:26:11.535 00:00:00.000 UDP 28.104.0.1:49038 -> 198.28.0.2:53 1 64 1 2025-09-13 09:22:31.764 00:05:00.267 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:27:11.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46783 1 80 1 2025-09-13 09:27:11.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58358 1 109 1 2025-09-13 09:27:11.824 00:00:00.000 UDP 28.104.0.1:58358 -> 198.28.0.2:53 1 64 1 2025-09-13 09:27:11.824 00:00:00.000 UDP 28.104.0.1:46783 -> 198.28.0.2:53 1 64 1 2025-09-13 09:27:29.026 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:28:12.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53923 1 109 1 2025-09-13 09:28:12.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44584 1 80 1 2025-09-13 09:28:12.119 00:00:00.000 UDP 28.104.0.1:44584 -> 198.28.0.2:53 1 64 1 2025-09-13 09:28:12.118 00:00:00.000 UDP 28.104.0.1:53923 -> 198.28.0.2:53 1 64 1 2025-09-13 09:24:27.407 00:05:04.687 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:29:12.422 00:00:00.000 UDP 28.104.0.1:40202 -> 198.28.0.2:53 1 64 1 2025-09-13 09:29:12.422 00:00:00.000 UDP 28.104.0.1:41319 -> 198.28.0.2:53 1 64 1 2025-09-13 09:29:12.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40202 1 80 1 2025-09-13 09:29:12.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41319 1 109 1 2025-09-13 09:25:21.860 00:05:00.434 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2808 1 2025-09-13 09:25:27.456 00:05:04.628 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:25:31.764 00:05:00.314 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:30:12.729 00:00:00.000 UDP 28.104.0.1:53219 -> 198.28.0.2:53 1 64 1 2025-09-13 09:30:12.730 00:00:00.000 UDP 28.104.0.1:44253 -> 198.28.0.2:53 1 64 1 2025-09-13 09:30:12.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44253 1 109 1 2025-09-13 09:30:12.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53219 1 80 1 2025-09-13 09:26:27.407 00:05:04.371 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:31:13.059 00:00:00.000 UDP 28.104.0.1:57306 -> 198.28.0.2:53 1 64 1 2025-09-13 09:31:13.059 00:00:00.000 UDP 28.104.0.1:40090 -> 198.28.0.2:53 1 64 1 2025-09-13 09:31:13.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40090 1 80 1 2025-09-13 09:31:13.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57306 1 109 1 2025-09-13 09:27:27.418 00:05:04.351 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:32:13.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39303 1 109 1 2025-09-13 09:32:13.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55455 1 80 1 2025-09-13 09:32:13.343 00:00:00.000 UDP 28.104.0.1:55455 -> 198.28.0.2:53 1 64 1 2025-09-13 09:32:13.342 00:00:00.000 UDP 28.104.0.1:39303 -> 198.28.0.2:53 1 64 1 2025-09-13 09:32:29.472 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:28:31.765 00:05:00.248 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:33:13.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59038 1 80 1 2025-09-13 09:33:13.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60173 1 109 1 2025-09-13 09:33:13.642 00:00:00.000 UDP 28.104.0.1:60173 -> 198.28.0.2:53 1 64 1 2025-09-13 09:33:13.642 00:00:00.000 UDP 28.104.0.1:59038 -> 198.28.0.2:53 1 64 1 2025-09-13 09:34:13.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37736 1 109 1 2025-09-13 09:34:13.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47387 1 80 1 2025-09-13 09:34:13.943 00:00:00.000 UDP 28.104.0.1:37736 -> 198.28.0.2:53 1 64 1 2025-09-13 09:34:13.943 00:00:00.000 UDP 28.104.0.1:47387 -> 198.28.0.2:53 1 64 1 2025-09-13 09:30:27.408 00:05:04.686 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:30:31.867 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-09-13 09:35:14.238 00:00:00.000 UDP 28.104.0.1:35627 -> 198.28.0.2:53 1 64 1 2025-09-13 09:35:14.238 00:00:00.000 UDP 28.104.0.1:54647 -> 198.28.0.2:53 1 64 1 2025-09-13 09:35:14.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35627 1 80 1 2025-09-13 09:35:14.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54647 1 109 1 2025-09-13 09:31:27.459 00:05:04.625 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:31:31.767 00:05:00.312 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:36:14.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47066 1 80 1 2025-09-13 09:36:14.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47152 1 109 1 2025-09-13 09:36:14.489 00:00:00.000 UDP 28.104.0.1:47066 -> 198.28.0.2:53 1 64 1 2025-09-13 09:36:14.489 00:00:00.000 UDP 28.104.0.1:47152 -> 198.28.0.2:53 1 64 1 2025-09-13 09:32:27.409 00:05:04.371 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:37:14.781 00:00:00.000 UDP 28.104.0.1:36139 -> 198.28.0.2:53 1 64 1 2025-09-13 09:37:14.781 00:00:00.000 UDP 28.104.0.1:35535 -> 198.28.0.2:53 1 64 1 2025-09-13 09:37:14.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36139 1 109 1 2025-09-13 09:37:14.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35535 1 80 1 2025-09-13 09:37:29.347 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:33:27.421 00:05:04.349 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:38:15.080 00:00:00.000 UDP 28.104.0.1:59022 -> 198.28.0.2:53 1 64 1 2025-09-13 09:38:15.080 00:00:00.000 UDP 28.104.0.1:39458 -> 198.28.0.2:53 1 64 1 2025-09-13 09:38:15.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59022 1 109 1 2025-09-13 09:38:15.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39458 1 80 1 2025-09-13 09:34:31.769 00:05:00.246 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:39:15.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38312 1 80 1 2025-09-13 09:39:15.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44191 1 109 1 2025-09-13 09:39:15.373 00:00:00.000 UDP 28.104.0.1:44191 -> 198.28.0.2:53 1 64 1 2025-09-13 09:39:15.373 00:00:00.000 UDP 28.104.0.1:38312 -> 198.28.0.2:53 1 64 1 2025-09-13 09:35:51.879 00:05:10.610 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3036 1 2025-09-13 09:40:15.667 00:00:00.000 UDP 28.104.0.1:35258 -> 198.28.0.2:53 1 64 1 2025-09-13 09:40:15.668 00:00:00.000 UDP 28.104.0.1:59603 -> 198.28.0.2:53 1 64 1 2025-09-13 09:40:15.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35258 1 80 1 2025-09-13 09:40:15.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59603 1 109 1 2025-09-13 09:36:27.410 00:05:04.690 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:41:15.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58170 1 80 1 2025-09-13 09:41:15.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53524 1 109 1 2025-09-13 09:41:15.956 00:00:00.000 UDP 28.104.0.1:53524 -> 198.28.0.2:53 1 64 1 2025-09-13 09:41:15.956 00:00:00.000 UDP 28.104.0.1:58170 -> 198.28.0.2:53 1 64 1 2025-09-13 09:37:27.460 00:05:04.640 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:37:31.769 00:05:00.314 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:42:16.263 00:00:00.000 UDP 28.104.0.1:35258 -> 198.28.0.2:53 1 64 1 2025-09-13 09:42:16.263 00:00:00.000 UDP 28.104.0.1:41144 -> 198.28.0.2:53 1 64 1 2025-09-13 09:42:16.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41144 1 80 1 2025-09-13 09:42:16.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35258 1 109 1 2025-09-13 09:42:29.585 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:38:27.411 00:05:04.370 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:43:16.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45323 1 109 1 2025-09-13 09:43:16.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38064 1 80 1 2025-09-13 09:43:16.566 00:00:00.000 UDP 28.104.0.1:38064 -> 198.28.0.2:53 1 64 1 2025-09-13 09:43:16.566 00:00:00.000 UDP 28.104.0.1:45323 -> 198.28.0.2:53 1 64 1 2025-09-13 09:39:27.422 00:05:04.349 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:44:16.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33536 1 109 1 2025-09-13 09:44:16.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57744 1 80 1 2025-09-13 09:44:16.867 00:00:00.000 UDP 28.104.0.1:33536 -> 198.28.0.2:53 1 64 1 2025-09-13 09:44:16.867 00:00:00.000 UDP 28.104.0.1:57744 -> 198.28.0.2:53 1 64 1 2025-09-13 09:40:31.771 00:05:00.247 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:45:17.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40293 1 109 1 2025-09-13 09:45:17.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35107 1 80 1 2025-09-13 09:45:17.175 00:00:00.000 UDP 28.104.0.1:40293 -> 198.28.0.2:53 1 64 1 2025-09-13 09:45:17.175 00:00:00.000 UDP 28.104.0.1:35107 -> 198.28.0.2:53 1 64 1 2025-09-13 09:41:11.892 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2792 1 2025-09-13 09:46:17.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45045 1 109 1 2025-09-13 09:46:17.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47958 1 80 1 2025-09-13 09:46:17.472 00:00:00.000 UDP 28.104.0.1:47958 -> 198.28.0.2:53 1 64 1 2025-09-13 09:46:17.472 00:00:00.000 UDP 28.104.0.1:45045 -> 198.28.0.2:53 1 64 1 2025-09-13 09:42:27.413 00:05:04.688 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:47:17.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42888 1 109 1 2025-09-13 09:47:17.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54170 1 80 1 2025-09-13 09:47:17.731 00:00:00.000 UDP 28.104.0.1:54170 -> 198.28.0.2:53 1 64 1 2025-09-13 09:47:17.731 00:00:00.000 UDP 28.104.0.1:42888 -> 198.28.0.2:53 1 64 1 2025-09-13 09:47:29.682 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:43:27.463 00:05:04.628 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:43:31.771 00:05:00.320 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:48:18.057 00:00:00.000 UDP 28.104.0.1:53639 -> 198.28.0.2:53 1 64 1 2025-09-13 09:48:18.058 00:00:00.000 UDP 28.104.0.1:42956 -> 198.28.0.2:53 1 64 1 2025-09-13 09:48:18.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53639 1 80 1 2025-09-13 09:48:18.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42956 1 109 1 2025-09-13 09:44:27.413 00:05:04.369 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:49:18.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57585 1 80 1 2025-09-13 09:49:18.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40763 1 109 1 2025-09-13 09:49:18.354 00:00:00.000 UDP 28.104.0.1:40763 -> 198.28.0.2:53 1 64 1 2025-09-13 09:49:18.354 00:00:00.000 UDP 28.104.0.1:57585 -> 198.28.0.2:53 1 64 1 2025-09-13 09:45:27.423 00:05:04.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:50:18.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34746 1 109 1 2025-09-13 09:50:18.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49716 1 80 1 2025-09-13 09:50:18.615 00:00:00.000 UDP 28.104.0.1:34746 -> 198.28.0.2:53 1 64 1 2025-09-13 09:50:18.614 00:00:00.000 UDP 28.104.0.1:49716 -> 198.28.0.2:53 1 64 1 2025-09-13 09:46:31.771 00:05:00.248 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:46:31.900 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2628 1 2025-09-13 09:51:18.900 00:00:00.000 UDP 28.104.0.1:51711 -> 198.28.0.2:53 1 64 1 2025-09-13 09:51:18.900 00:00:00.000 UDP 28.104.0.1:54342 -> 198.28.0.2:53 1 64 1 2025-09-13 09:51:18.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54342 1 109 1 2025-09-13 09:51:18.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51711 1 80 1 2025-09-13 09:52:19.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51236 1 109 1 2025-09-13 09:52:19.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40385 1 80 1 2025-09-13 09:52:19.219 00:00:00.000 UDP 28.104.0.1:51236 -> 198.28.0.2:53 1 64 1 2025-09-13 09:52:19.219 00:00:00.000 UDP 28.104.0.1:40385 -> 198.28.0.2:53 1 64 1 2025-09-13 09:52:29.784 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:48:27.414 00:05:04.690 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 09:53:19.524 00:00:00.000 UDP 28.104.0.1:59514 -> 198.28.0.2:53 1 64 1 2025-09-13 09:53:19.524 00:00:00.000 UDP 28.104.0.1:39745 -> 198.28.0.2:53 1 64 1 2025-09-13 09:53:19.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59514 1 80 1 2025-09-13 09:53:19.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39745 1 109 1 2025-09-13 09:49:27.464 00:05:04.631 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 09:49:31.773 00:05:00.320 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-13 09:54:19.812 00:00:00.000 UDP 28.104.0.1:35420 -> 198.28.0.2:53 1 64 1 2025-09-13 09:54:19.812 00:00:00.000 UDP 28.104.0.1:34815 -> 198.28.0.2:53 1 64 1 2025-09-13 09:54:19.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35420 1 80 1 2025-09-13 09:54:19.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34815 1 109 1 2025-09-13 09:50:27.414 00:05:04.370 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 09:55:20.115 00:00:00.000 UDP 28.104.0.1:46477 -> 198.28.0.2:53 1 64 1 2025-09-13 09:55:20.115 00:00:00.000 UDP 28.104.0.1:45090 -> 198.28.0.2:53 1 64 1 2025-09-13 09:55:20.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46477 1 109 1 2025-09-13 09:55:20.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45090 1 80 1 2025-09-13 09:51:27.423 00:05:04.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 09:51:51.903 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2584 1 2025-09-13 09:56:20.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45602 1 109 1 2025-09-13 09:56:20.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44431 1 80 1 2025-09-13 09:56:20.426 00:00:00.000 UDP 28.104.0.1:44431 -> 198.28.0.2:53 1 64 1 2025-09-13 09:56:20.426 00:00:00.000 UDP 28.104.0.1:45602 -> 198.28.0.2:53 1 64 1 2025-09-13 09:52:31.773 00:05:00.252 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-13 09:57:20.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37406 1 109 1 2025-09-13 09:57:20.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34674 1 80 1 2025-09-13 09:57:20.722 00:00:00.000 UDP 28.104.0.1:37406 -> 198.28.0.2:53 1 64 1 2025-09-13 09:57:20.722 00:00:00.000 UDP 28.104.0.1:34674 -> 198.28.0.2:53 1 64 1 2025-09-13 09:57:29.850 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 09:58:21.404 00:00:00.000 UDP 28.104.0.1:40387 -> 198.28.0.2:53 1 64 1 2025-09-13 09:58:21.404 00:00:00.000 UDP 28.104.0.1:55357 -> 198.28.0.2:53 1 64 1 2025-09-13 09:58:21.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40387 1 80 1 2025-09-13 09:58:21.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55357 1 109 1 2025-09-13 09:54:27.415 00:05:04.692 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 Summary: total flows: 326, total bytes: 96413, total packets: 1421, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-09-13 08:55:27 - 2025-09-13 09:59:32 Total flows processed: 326, passed: 326, Blocks skipped: 0, Bytes read: 33968 Sys: 0.0031s User: 0.0031s Wall: 0.0031s flows/second: 105464.2 Runtime: 0.0031s